
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
File: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft (raw, json)
Hash identifier: 72W5ZkhLAbfHckz1gBLz5vskjadFX2fHlAVcBeG/MLU=
Subject key identifier: FF:2C:42:C6:46:06:3B:AC:ED:FB:DA:9D:A4:8A:F5:CA:3C:7F:C8:D1
Authority key identifier: 87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04
Certificate issuer: /CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04
Certificate serial: 028F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
Manifest number: 026F
Signing time: Wed 21 Oct 2026 02:52:18 +0000
Manifest this update: Wed 21 Oct 2026 02:52:17 +0000
Manifest next update: Wed 28 Oct 2026 02:52:17 +0000
Files and hashes: 1: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl (hash: MgRJ6RMyNqE4Mm/iE5epEOsGiOjF+H5J3g9Z5bw+X8E=)
2: 60C72042052911F0A2361C50C4F9AE02.roa (hash: Mi+iRYH8oLuQ7nVmsO2NAf7yTqeWaOmHLkb8IkLkMI4=)
3: 24661146FA7311EFB58C366CC4F9AE02.roa (hash: PI6DSRXfJAvlO/2VPjvpon4UfNQyK9r1cVQRy7nMC3Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl
rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 02:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655 (0x28f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A294, serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04
Validity
Not Before: Oct 21 02:52:17 2026 GMT
Not After : Oct 28 02:52:17 2026 GMT
Subject: CN=6ad828e1-b597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:69:c6:ad:f8:1a:25:ef:6d:51:04:ac:9e:1f:
e2:d3:be:64:9f:45:c7:63:01:61:ce:b4:c8:6d:34:
d4:c8:c2:06:d1:88:3d:fb:04:f5:d5:e2:8d:ef:a2:
aa:d5:b4:b9:84:1a:77:b2:3e:16:27:54:d4:bd:16:
0c:e6:43:82:40:26:ac:f1:d5:b8:4a:c0:97:39:19:
f4:3f:bf:c4:ef:55:c7:83:37:b0:21:c3:50:79:0f:
d2:89:ef:c0:43:f2:be:8c:97:b5:ec:9b:85:1f:d5:
40:2a:4b:a9:fb:ce:e2:9e:93:7a:51:25:f1:77:ea:
e2:ff:c9:03:7a:26:9d:6a:7a:b8:1a:e6:32:fd:79:
bb:d3:81:58:51:77:7c:cc:16:11:80:5f:22:82:fb:
64:5e:f8:45:a1:76:d5:15:e1:0b:04:3c:77:75:a4:
86:0e:22:16:1f:20:1b:f4:c4:0c:d5:66:0b:a1:33:
7f:74:b1:a7:29:44:bc:52:db:69:72:53:b8:51:20:
b1:df:e4:49:6f:69:d7:6e:8e:03:e2:4b:bf:43:d5:
a7:fb:70:2e:40:66:88:e7:23:a6:a1:03:2b:d3:77:
7a:40:d6:20:9a:fa:d9:ce:1f:fd:42:5f:9f:14:f1:
41:d7:c2:68:26:26:62:d2:2e:99:bb:1e:0b:82:cd:
99:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2C:42:C6:46:06:3B:AC:ED:FB:DA:9D:A4:8A:F5:CA:3C:7F:C8:D1
X509v3 Authority Key Identifier:
keyid:87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d0:5e:81:03:b2:ee:ed:80:24:4e:f1:6b:15:a5:cf:2a:a9:
cb:bf:e4:f8:8c:9e:51:6b:9c:ee:ec:0d:15:2a:bd:35:e9:08:
da:a1:f3:b9:7e:92:29:20:1b:e9:82:9c:66:69:c5:32:c1:be:
5e:37:eb:92:a0:58:e7:64:50:34:30:69:38:3f:21:19:43:87:
3d:23:3b:0d:18:9d:e6:79:91:d5:b7:d7:9c:20:75:3d:94:f2:
9e:0d:2f:e4:ed:44:a2:e6:89:ce:ce:98:ea:96:8a:1a:b8:f3:
aa:96:77:9a:7c:16:ab:20:d4:d7:72:a6:94:dd:2c:1d:e0:ba:
a6:68:2f:42:1e:93:9c:c9:8f:2e:4f:3f:9f:0a:9c:e3:2e:36:
b5:fe:9e:eb:da:c9:d5:c1:ff:b0:57:dc:35:61:1d:32:5c:f0:
ba:7e:1d:e2:86:e5:a1:83:5c:25:6a:89:95:ab:07:19:c2:c8:
88:c3:88:d1:58:ab:55:6e:0e:0c:d2:2b:2c:64:34:73:49:2c:
66:20:ea:a8:32:d2:6e:ac:1b:ad:a5:d5:3e:2f:34:0f:c7:25:
29:7b:2f:a4:9e:ba:8a:12:f6:0e:ab:fb:e8:a8:6e:8c:1e:6f:
57:65:41:78:8b:41:d0:bb:53:39:85:e1:4c:de:40:30:19:53:
ee:b9:1c:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkEyOTQxMTAvBgNVBAUTKDg3QjVEODUzRjY0MjUyMTVBREE3ODIyRjAyQTU3NDgz
RUUyNjdDMDQwHhcNMjYxMDIxMDI1MjE3WhcNMjYxMDI4MDI1MjE3WjAYMRYwFAYD
VQQDEw02YWQ4MjhlMS1iNTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsGnGrfgaJe9tUQSsnh/i075kn0XHYwFhzrTIbTTUyMIG0Yg9+wT11eKN76Kq
1bS5hBp3sj4WJ1TUvRYM5kOCQCas8dW4SsCXORn0P7/E71XHgzewIcNQeQ/Sie/A
Q/K+jJe17JuFH9VAKkup+87inpN6USXxd+ri/8kDeiadanq4GuYy/Xm704FYUXd8
zBYRgF8igvtkXvhFoXbVFeELBDx3daSGDiIWHyAb9MQM1WYLoTN/dLGnKUS8Uttp
clO4USCx3+RJb2nXbo4D4ku/Q9Wn+3AuQGaI5yOmoQMr03d6QNYgmvrZzh/9Ql+f
FPFB18JoJiZi0i6Zux4Lgs2ZoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP8sQsZG
Bjus7fvanaSK9co8f8jRMB8GA1UdIwQYMBaAFIe12FP2QlIVraeCLwKldIPuJnwE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTI5NC85OTJGMUQwRTRB
RDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1VoV3RwNEl2QXFWMGctNG1m
QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g3WFlVX1pDVWhXdHA0SXZBcVYwZy00bWZBUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QTI5NC85OTJGMUQwRTRBRDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1Vo
V3RwNEl2QXFWMGctNG1mQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb9BegQOy7u2AJE7xaxWlzyqpy7/k+IyeUWuc7uwNFSq9NekI2qHzuX6SKSAb
6YKcZmnFMsG+XjfrkqBY52RQNDBpOD8hGUOHPSM7DRid5nmR1bfXnCB1PZTyng0v
5O1EouaJzs6Y6paKGrjzqpZ3mnwWqyDU13KmlN0sHeC6pmgvQh6TnMmPLk8/nwqc
4y42tf6e69rJ1cH/sFfcNWEdMlzwun4d4obloYNcJWqJlasHGcLIiMOI0VirVW4O
DNIrLGQ0c0ksZiDqqDLSbqwbraXVPi80D8clKXsvpJ66ihL2Dqv76KhujB5vV2VB
eItB0LtTOYXhTN5AMBlT7rkcdg==
-----END CERTIFICATE-----
Generated at Fri Oct 23 00:30:19 2026 by rpki-client